CVE-2026-35333

strongSwan 5.9.13 - DoS

STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2026-35333. PoCs published by Lukas Johannes Moeller, JohannesLks.

AI-analyzed exploit summary This exploit demonstrates a pre-authentication denial-of-service (DoS) vulnerability in strongSwan's RADIUS DAE plugin by sending a malformed RADIUS Access-Request packet with a zero-length attribute, causing an infinite loop in the worker thread.

Description

strongSwan 5.9.13 - DoS

Exploits (2)

exploitdb WORKING POC
by Lukas Johannes Moeller · pythondosmultiple
https://www.exploit-db.com/exploits/52586

This exploit demonstrates a pre-authentication denial-of-service (DoS) vulnerability in strongSwan's RADIUS DAE plugin by sending a malformed RADIUS Access-Request packet with a zero-length attribute, causing an infinite loop in the worker thread.

Classification
Working Poc 100%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: strongSwan <= 5.9.13 (with eap-radius plugin and DAE enabled)
No auth needed
Prerequisites: strongSwan with eap-radius plugin built with DAE enabled · DAE listener bound on UDP/3799 · network access to the target
mistral-large-3 · analyzed May 30, 2026 Full analysis →
nomisec WORKING POC
by JohannesLks · poc
https://github.com/JohannesLks/CVE-2026-35333

This repository contains a functional exploit for CVE-2026-35333, a DoS vulnerability in strongSwan's RADIUS attribute parser. The PoC sends a crafted RADIUS Access-Request packet with a zero-length attribute to trigger an infinite loop in the attribute enumerator, causing a worker thread to hang indefinitely.

Classification
Working Poc 100%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: strongSwan <= 5.9.13
No auth needed
Prerequisites: Network access to UDP/3799 on the target · strongSwan with eap-radius plugin and DAE enabled
mistral-large-3 · analyzed May 30, 2026 Full analysis →

Details

Status draft
Tracked Since May 30, 2026